An audacious attacker is targeting a web server you oversee. He intends to perform a Slow HTTP POST attack, by manipulating 'a' HTTP connection. Each connection sends a byte of data every 'b'…

Question

Options

• Am=110, b=20: Despite the attacker sending 100 connections, the server can handle 110
• Bm=90, b=15: The server can manage 90 connections per second, but the attacker's 100
• C95, b=10: Here, the server can handle 95 connections per second, but it falls short against the
• Dm=105, b=12: The server can manage 105 connections per second, more than the attacker's 100

• A
  17% (3)
• B
  72% (13)
• C
  6% (1)
• D
  6% (1)

Explanation

Explanation

Option B (m=90, b=15) is correct because it produces the longest attack duration D = a × b = 100 × 15 = 1500 seconds, while simultaneously ensuring the server is overwhelmed - since the attacker's 100 connections exceed the server's capacity of only 90 connections per second, meaning the attack is both effective and prolonged.

Options A (D=2000) and D (D=1200) are incorrect because even though A has a higher duration value, the server in A can handle 110 connections (more than the attacker's 100), so the attack fails to overwhelm the server, making unavailability unlikely; similarly, D's server handles 105 connections, neutralizing the attack. Option C (m=95, b=10) gives D=1000 seconds - while the server is overwhelmed (95 < 100), the duration is shorter than B's 1500 seconds, making it less damaging overall.

Memory Tip: Think of a successful Slow HTTP POST attack as needing two conditions to align - the server must be under capacity (m < a) AND the duration must be maximized (high b value). Use the phrase "Overwhelm AND Outlast" to remember that both criteria must be satisfied simultaneously for the worst outcome.

No community discussion yet for this question.